Re: [tor-bugs] #31094 [Applications/Tor Browser]: Tor Browser in Whonix blocks JavaScript (only when started for the first time) and in DispVMs

[Tor Bug Tracker & Wiki]

#31094: Tor Browser in Whonix blocks JavaScript (only when started for the first
time) and in DispVMs
--+---
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  defect| Status:  needs_information
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---

Comment (by cypherpunks):

 Replying to [comment:6 adrelanos]:
 > I can't reproduce this. Only reporter can confirm.

 here is another person confirming this issue
 http://forums.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion/t
 /tor-browser-in-whonix-blocks-javascript-only-when-started-for-the-first-
 time-and-in-dispvms/6843/10

 > > > There are other recent changes and decisions by Tor Project which
 often cause questions. List of things up to The Tor Project having decided
 for now at the time of writing:
 > > >
 > > > * not enable to set noscript to blocking of all scripts globally by
 default,
 > >
 > > That's not a recent decision or change but has been that way forever,
 see our FAQ entry: https://support.torproject.org/#tbb-34
 >
 > Indeed, however users often bring it up and blame it on Whonix.

 Note that the issue this trac entry is about has nothing todo with the
 above, actually it is about the very opposite (all scripts blocked by
 default when the issue occurs).

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31094 [Applications/Tor Browser]: Tor Browser in Whonix blocks JavaScript (only when started for the first time) and in DispVMs

[Tor Bug Tracker & Wiki]

#31094: Tor Browser in Whonix blocks JavaScript (only when started for the first
time) and in DispVMs
--+---
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  defect| Status:  needs_information
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---

Comment (by adrelanos):

 Could this be related to or being a duplicate or regression of #27401?

 Replying to [comment:4 cypherpunks]:
 > Simmer down gk, adrelanos wasn't contesting those things but merely
 reminding the OP about them :)

 Indeed.

 Replying to [comment:3 gk]:
 > Replying to [comment:2 adrelanos]:
 > > > Tor Browser in Whonix blocks JavaScript (only when started for the
 first time) and in DispVMs
 > >
 > > > There is a long standing issue with Tor Browser that I reported to
 Whonix, but they say that it is an upstream issue.
 > >
 > > Citation required.
 > >
 > > "blocks JavaScript (only when started for the first time)" - No, I
 don't think this is an issue caused by Tor Browser which Tor Project could
 fix. Except, if
 > >
 > > > If you take the Tor Browser as we ship it (by downloading it from
 our website and extracting it) and run that inside your environment, does
 this happen as well?
 > >
 > > above quote was the case.
 >
 > Could you make your point a bit clearer here? I was trying to figure out
 whether the Tor Browser as we offer it from our website is giving the same
 behavior as the software Whonix is shipping (which I don't know anything
 about), but I am still not sure what the answer here is.

 I can't reproduce this. Only reporter can confirm.

 > as the software Whonix is shipping (which I don't know anything about)

 Btw the differences are here:
 
https://www.whonix.org/wiki/Tor_Browser#Tor_Browser_Bundle_versus_Whonix_Tor_Browser

 And here:
 #19652 (which still up to date)

 > > There are other recent changes and decisions by Tor Project which
 often cause questions. List of things up to The Tor Project having decided
 for now at the time of writing:
 > >
 > > * not enable to set noscript to blocking of all scripts globally by
 default,
 >
 > That's not a recent decision or change but has been that way forever,
 see our FAQ entry: https://support.torproject.org/#tbb-34

 Indeed, however users often bring it up and blame it on Whonix.

 > > * not persist noscript per-site settings by default,
 >
 > Per-site permissions saved by default would risk making you linkability
 across different website because you probably have a non-generic
 whitelist. But if someone really wants that then there is a pref you can
 flip. See: #27175 for the full discussion.

 Not contesting that. Even have that in Whonix documentation:
 https://www.whonix.org/wiki/Tor_Browser#NoScript_Custom_Setting_Persistence

 > > * remove noscript from Tor Browser menu bar by default.
 >
 > #25658 is the ticket you want and proposal 101
 (https://gitweb.torproject.org/tor-browser-spec.git/tree/proposals/101
 -security-controls-redesign.txt) for more background. You can follow the
 tbb-dev list for proposal discussions like that one. This feature has been
 in the works for months.

 Not contesting that either (would create a ticket if I had a suggestion)
 but good to have the links to further information so we can link it from
 Whonix documentation.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31094 [Applications/Tor Browser]: Tor Browser in Whonix blocks JavaScript (only when started for the first time) and in DispVMs

[Tor Bug Tracker & Wiki]

#31094: Tor Browser in Whonix blocks JavaScript (only when started for the first
time) and in DispVMs
--+---
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  defect| Status:  needs_information
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---

Comment (by cypherpunks):

 Replying to [comment:1 gk]:
 > If you take the Tor Browser as we ship it (by downloading it from our
 website and extracting it) and run that inside your environment, does this
 happen as well?

 https://forums.whonix.org/t/tor-browser-in-whonix-blocks-javascript-only-
 when-started-for-the-first-time-and-in-dispvms/6843/11:
 I don’t think this is a vanilla torbrowser bug since it only happens in
 whonix - never with vanilla torbrowser.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31094 [Applications/Tor Browser]: Tor Browser in Whonix blocks JavaScript (only when started for the first time) and in DispVMs

[Tor Bug Tracker & Wiki]

#31094: Tor Browser in Whonix blocks JavaScript (only when started for the first
time) and in DispVMs
--+---
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  defect| Status:  needs_information
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---

Comment (by cypherpunks):

 Simmer down gk, adrelanos wasn't contesting those things but merely
 reminding the OP about them :)

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31094 [Applications/Tor Browser]: Tor Browser in Whonix blocks JavaScript (only when started for the first time) and in DispVMs

[Tor Bug Tracker & Wiki]

#31094: Tor Browser in Whonix blocks JavaScript (only when started for the first
time) and in DispVMs
--+---
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  defect| Status:  needs_information
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---

Comment (by gk):

 Replying to [comment:2 adrelanos]:
 > > Tor Browser in Whonix blocks JavaScript (only when started for the
 first time) and in DispVMs
 >
 > > There is a long standing issue with Tor Browser that I reported to
 Whonix, but they say that it is an upstream issue.
 >
 > Citation required.
 >
 > "blocks JavaScript (only when started for the first time)" - No, I don't
 think this is an issue caused by Tor Browser which Tor Project could fix.
 Except, if
 >
 > > If you take the Tor Browser as we ship it (by downloading it from our
 website and extracting it) and run that inside your environment, does this
 happen as well?
 >
 > above quote was the case.

 Could you make your point a bit clearer here? I was trying to figure out
 whether the Tor Browser as we offer it from our website is giving the same
 behavior as the software Whonix is shipping (which I don't know anything
 about), but I am still not sure what the answer here is.

 > There are other recent changes and decisions by Tor Project which often
 cause questions. List of things up to The Tor Project having decided for
 now at the time of writing:
 >
 > * not enable to set noscript to blocking of all scripts globally by
 default,

 That's not a recent decision or change but has been that way forever, see
 our FAQ entry: https://support.torproject.org/#tbb-34

 > * not persist noscript per-site settings by default,

 Per-site permissions saved by default would risk making you linkability
 across different website because you probably have a non-generic
 whitelist. But if someone really wants that then there is a pref you can
 flip. See: #27175 for the full discussion.

 > * remove noscript from Tor Browser menu bar by default.

 #25658 is the ticket you want and proposal 101
 (https://gitweb.torproject.org/tor-browser-spec.git/tree/proposals/101
 -security-controls-redesign.txt) for more background. You can follow the
 tbb-dev list for proposal discussions like that one. This feature has been
 in the works for months.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31094 [Applications/Tor Browser]: Tor Browser in Whonix blocks JavaScript (only when started for the first time) and in DispVMs

[Tor Bug Tracker & Wiki]

#31094: Tor Browser in Whonix blocks JavaScript (only when started for the first
time) and in DispVMs
--+---
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  defect| Status:  needs_information
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---

Comment (by adrelanos):

 > Tor Browser in Whonix blocks JavaScript (only when started for the first
 time) and in DispVMs

 > There is a long standing issue with Tor Browser that I reported to
 Whonix, but they say that it is an upstream issue.

 Citation required.

 "blocks JavaScript (only when started for the first time)" - No, I don't
 think this is an issue caused by Tor Browser which Tor Project could fix.
 Except, if

 > If you take the Tor Browser as we ship it (by downloading it from our
 website and extracting it) and run that inside your environment, does this
 happen as well?

 above quote was the case.

 There are other recent changes and decisions by Tor Project which often
 cause questions. List of things up to The Tor Project having decided for
 now at the time of writing:

 * not enable to set noscript to blocking of all scripts globally by
 default,
 * not persist noscript per-site settings by default,
 * remove noscript from Tor Browser menu bar by default.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #31094 [Applications/Tor Browser]: Tor Browser in Whonix blocks JavaScript (only when started for the first time) and in DispVMs

[Tor Bug Tracker & Wiki]

#31094: Tor Browser in Whonix blocks JavaScript (only when started for the first
time) and in DispVMs
--+---
 Reporter:  cypherpunks   |  Owner:  tbb-team
 Type:  defect| Status:  needs_information
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+---
Changes (by gk):

 * status:  new => needs_information


Comment:

 If you take the Tor Browser as we ship it and run that inside your
 environment, does this happen as well?

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #31094 [Applications/Tor Browser]: Tor Browser in Whonix blocks JavaScript (only when started for the first time) and in DispVMs

[Tor Bug Tracker & Wiki]

#31094: Tor Browser in Whonix blocks JavaScript (only when started for the first
time) and in DispVMs
-+--
 Reporter:  cypherpunks  |  Owner:  tbb-team
 Type:  defect   | Status:  new
 Priority:  Medium   |  Component:  Applications/Tor Browser
  Version:   |   Severity:  Normal
 Keywords:   |  Actual Points:
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+--
 There is a long standing issue with Tor Browser that I reported to Whonix,
 but they say that it is an upstream issue.

 There appears to be a race condition when Tor Browser starts for the first
 time NoScript is most of the times (~8/10)  blocking all scripts.

 Since I run Tor Browser in so called "disposable VMs" (Qubes OS) where
 every Tor Browser start is as if it would start for the first time - this
 is a rather annoying issue.

 To work around that I have to go to the NoScript settings after _every_
 Tor Browser start and disable restrictions, with the latest Tor Browser
 version this has become more painful since the NoScript button is no
 longer displayed directly in the Browser bar.

 https://forums.whonix.org/t/tor-browser-in-whonix-blocks-javascript-only-
 when-started-for-the-first-time-and-in-dispvms/6843

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs